$ rpki-client -vvf repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft File: 535C0FE8EE7BE7E1C8897B031858C36344038072.mft (raw, json) Hash identifier: uF4ZqgXKf+1BjXIqCaL/4Z9oGqQWtqKgWfiekXHdfNQ= Subject key identifier: 61:E7:46:A7:A3:9E:BA:E2:28:90:CD:20:B5:23:4C:18:07:70:A3:96 Authority key identifier: 53:5C:0F:E8:EE:7B:E7:E1:C8:89:7B:03:18:58:C3:63:44:03:80:72 Certificate issuer: /CN=535C0FE8EE7BE7E1C8897B031858C36344038072 Certificate serial: 2A9803A934D6A4BA18D4FFBB11A5427C679063C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft Manifest number: 3C Signing time: Mon 17 Feb 2025 16:30:50 +0000 Manifest this update: Mon 17 Feb 2025 16:25:50 +0000 Manifest next update: Thu 20 Feb 2025 23:58:50 +0000 Files and hashes: 1: 535C0FE8EE7BE7E1C8897B031858C36344038072.crl (hash: RJhMqpL/UZT6Ln9Kns3wKJ2Vf0g1NMSj4H4lAYGHclc=) 2: 3130332e3137392e31332e302f32342d3234203d3e20313439333339.roa (hash: RrMbT80FUemGe695AxppDWAP2LkCS0fiZaNilGLH1lg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.crl rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 23:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:98:03:a9:34:d6:a4:ba:18:d4:ff:bb:11:a5:42:7c:67:90:63:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535C0FE8EE7BE7E1C8897B031858C36344038072 Validity Not Before: Feb 17 16:25:50 2025 GMT Not After : Feb 20 23:58:50 2025 GMT Subject: CN=61E746A7A39EBAE22890CD20B5234C180770A396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:55:e9:69:7e:80:1c:65:e8:7c:1f:1c:e0:d1: 64:10:a7:8f:50:b9:a5:3d:8a:0d:e8:4f:64:ef:95: 6e:b2:7a:51:3e:cf:b0:f2:23:79:62:bb:34:1f:a5: 1b:53:6f:3e:c5:57:42:54:bd:c2:1c:0a:75:b2:96: ed:f5:a8:2b:36:cc:8a:51:c4:96:b3:11:05:d9:2a: fd:4d:e2:e6:dc:70:6d:b4:49:63:f2:fa:6a:7a:82: e4:54:15:9e:87:77:10:ce:c6:30:09:f3:66:5c:ee: 03:ba:eb:0e:53:75:69:1b:02:9b:88:19:07:25:7c: e5:0e:5c:f8:17:b8:85:df:99:d4:cc:ca:50:0e:43: c7:19:84:d2:49:51:49:3b:96:24:52:1b:86:10:c7: 18:b7:ca:f0:47:f4:92:2d:e0:f2:c5:ec:fd:1f:5c: e2:7a:03:a1:7a:5b:2a:c1:d9:69:50:f3:75:41:ff: ec:00:f3:2d:08:73:9f:91:ec:68:1a:bc:b0:cc:ea: dc:ab:f4:ac:ff:d7:56:5a:dd:36:98:be:91:e0:af: fe:39:4d:06:20:af:bf:9d:1a:9f:56:55:27:71:13: b6:bd:b4:63:63:87:9d:b0:2b:28:5f:31:ca:6a:bb: 59:f6:59:f2:de:fd:24:43:b9:f7:f3:38:09:72:59: 1d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:E7:46:A7:A3:9E:BA:E2:28:90:CD:20:B5:23:4C:18:07:70:A3:96 X509v3 Authority Key Identifier: keyid:53:5C:0F:E8:EE:7B:E7:E1:C8:89:7B:03:18:58:C3:63:44:03:80:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:7d:9e:bb:5b:90:80:a1:72:f1:17:cb:e8:13:cc:a2:0e:d5: cb:cd:f9:1c:a8:5b:a4:a1:63:45:54:8c:48:9e:70:22:e1:a0: 77:e0:75:95:c3:17:0e:32:b3:97:7b:cb:b5:cc:fa:8d:62:24: 3b:21:df:2c:85:f9:cc:4d:04:7f:40:51:30:00:be:40:7b:98: 8c:09:23:9c:6c:df:37:7c:41:62:ce:79:8a:38:99:7d:b1:a5: 49:c1:69:5f:e5:55:29:fe:1b:f4:02:81:0a:ce:80:24:e6:cf: 5e:2c:b6:b6:4f:0b:07:99:2b:67:ef:17:c9:42:ed:6f:70:ad: e7:35:93:1a:34:55:de:75:d8:f4:f5:6c:3d:79:c1:96:48:c2: f2:22:14:0d:92:88:48:23:e6:3e:79:67:56:2d:fc:a7:51:e1: 81:b0:ac:bd:f4:93:03:ed:78:d6:33:84:20:51:6f:81:16:da: 4f:6f:ce:d9:16:17:16:e9:d5:0a:15:14:47:90:c1:17:18:cf: 61:c8:f5:93:b5:df:f0:6c:ec:f3:61:16:4b:9a:28:cc:5a:3c: 7f:64:17:c4:fa:03:54:d9:90:1b:22:1b:f3:3a:3c:58:b4:ca: d8:b5:05:6a:c3:c4:d6:87:b2:2c:ea:ef:fa:d1:cd:6f:75:fd: ae:44:ca:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKpgDqTTWpLoY1P+7EaVCfGeQY8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1QzBGRThFRTdCRTdFMUM4ODk3QjAzMTg1OEMzNjM0 NDAzODA3MjAeFw0yNTAyMTcxNjI1NTBaFw0yNTAyMjAyMzU4NTBaMDMxMTAvBgNV BAMTKDYxRTc0NkE3QTM5RUJBRTIyODkwQ0QyMEI1MjM0QzE4MDc3MEEzOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9VelpfoAcZeh8Hxzg0WQQp49Q uaU9ig3oT2TvlW6yelE+z7DyI3liuzQfpRtTbz7FV0JUvcIcCnWylu31qCs2zIpR xJazEQXZKv1N4ubccG20SWPy+mp6guRUFZ6HdxDOxjAJ82Zc7gO66w5TdWkbApuI GQclfOUOXPgXuIXfmdTMylAOQ8cZhNJJUUk7liRSG4YQxxi3yvBH9JIt4PLF7P0f XOJ6A6F6WyrB2WlQ83VB/+wA8y0Ic5+R7GgavLDM6tyr9Kz/11Za3TaYvpHgr/45 TQYgr7+dGp9WVSdxE7a9tGNjh52wKyhfMcpqu1n2WfLe/SRDuffzOAlyWR3pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYedGp6OeuuIokM0gtSNMGAdwo5YwHwYDVR0j BBgwFoAUU1wP6O575+HIiXsDGFjDY0QDgHIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzQ1NGQwYi0xYWQ3LTQxZWQtOGU0MC1jY2I2NjY0M2FjZjAvMC81MzVDMEZFOEVF N0JFN0UxQzg4OTdCMDMxODU4QzM2MzQ0MDM4MDcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTM1QzBGRThFRTdCRTdFMUM4ODk3QjAzMTg1OEMzNjM0NDAz ODA3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM0NTRkMGItMWFkNy00MWVkLThl NDAtY2NiNjY2NDNhY2YwLzAvNTM1QzBGRThFRTdCRTdFMUM4ODk3QjAzMTg1OEMz NjM0NDAzODA3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH59nrtbkIChcvEXy+gTzKIO1cvN+RyoW6Sh Y0VUjEiecCLhoHfgdZXDFw4ys5d7y7XM+o1iJDsh3yyF+cxNBH9AUTAAvkB7mIwJ I5xs3zd8QWLOeYo4mX2xpUnBaV/lVSn+G/QCgQrOgCTmz14strZPCweZK2fvF8lC 7W9wrec1kxo0Vd512PT1bD15wZZIwvIiFA2SiEgj5j55Z1Yt/KdR4YGwrL30kwPt eNYzhCBRb4EW2k9vztkWFxbp1QoVFEeQwRcYz2HI9ZO13/Bs7PNhFkuaKMxaPH9k F8T6A1TZkBsiG/M6PFi0yti1BWrDxNaHsizq7/rRzW91/a5EyhI= -----END CERTIFICATE-----Generated at Wed Feb 19 22:08:15 2025 by rpki-client